February the 5th 2014 at 12:37 GMT+1 We were hit with an NTP DDoS Amplification attack!What is an NTP DDoS attack? We usually get 2-3 DDoS attacks per day , but not that big. They usually reach up to 50 or 75gbits tops.
As soon as the DDoS Hit we tried to mitigate the attack. Our failover balancer automaticly switched to new ips for the stratum and web , however the attack followed the DNS change immediately.
The attack was constantly growing so our upstreams had no other choise but to null route(blackhole) us as soon as it reached more than 150gbits
The peak of the attack was close to 200gbits , with millions of packages per second.